Technical Architecture

Shadow AI & Asset Discovery

Continuous discovery of AI clients, undeclared MCP tools, and shadow execution paths across macOS endpoints.

The Shadow AI Risk in Developer Environments

Developers frequently install local MCP servers, community skill packages, and AI IDE plugins without security review. Gaussian replaces static config reviews with continuous, endpoint-native discovery of every AI client and capability.
Canonical Definition · Shadow AI Endpoint Discovery

Shadow AI Discovery in Gaussian is an automated endpoint capability engine that identifies unapproved AI client executables, scans local Model Context Protocol (mcp.json) tool configs, and cross-references active posix_spawn binary calls against enterprise compliance policies on macOS.

Discovery Pipeline Architecture

Gaussian runs a lightweight local sensor thread on macOS that continuously audits AI asset posture without performance overhead:

01. AI Client Inventory

Scans active process signatures and macOS app bundles across Cursor, Claude, Windsurf, Copilot, Zed, VS Code, JetBrains, and Gemini.

Identifies 35+ client families using ClientMetadata.swift signature definitions.

02. Configuration & Manifest Scanning

Parses local configuration files for declared MCP tools, extension manifests, and skill customization directories.

Monitors mcp.json, settings.json, SKILL.md, and skills.json inheritance graphs.

03. Runtime Execution Cross-Check

Correlates declared configs with real OS-level Endpoint Security (ES) process spawns and Network Extension (NE) egress flows.

Flags undeclared stdio tools, unapproved HTTP endpoints, and shadow AI runners instantly.

04. Risk Tiering & Fleet Export

Assigns risk scores based on tool privileges, secret access, and network egress destinations.

Exports structured telemetry events to SIEM platforms (Splunk, Datadog) and enterprise dashboard.

Governed AI Client Family Catalog

Gaussian automatically inventories and governs 35+ AI client families, desktop applications, and CLI runners:

CursorGOVERNED
IDE / Code Editor
Bundle Signature:com.todesktop.230313mnuyzscwq
Config Path:~/Library/Application Support/Cursor/User/globalStorage/mcp.json
MCP Support:Native stdio & SSE
Claude DesktopGOVERNED
Desktop Application
Bundle Signature:com.anthropic.claudedesktop
Config Path:~/Library/Application Support/Claude/claude_desktop_config.json
MCP Support:Native stdio & SSE
WindsurfGOVERNED
IDE / Code Editor
Bundle Signature:com.exafunction.windsurf
Config Path:~/.codeium/windsurf/mcp_config.json
MCP Support:Native stdio
ZedGOVERNED
IDE / Code Editor
Bundle Signature:dev.zed.Zed
Config Path:~/.config/zed/settings.json
MCP Support:Native stdio
GitHub Copilot EnterpriseGOVERNED
IDE / Code Editor
Bundle Signature:com.microsoft.VSCode
Config Path:~/.config/Code/User/settings.json
MCP Support:Extension IPC
Claude Code CLIGOVERNED
CLI / Framework Runner
Bundle Signature:com.anthropic.claudecode
Config Path:~/.claude/mcp.json
MCP Support:Native stdio
JetBrains AI AssistantGOVERNED
IDE / Code Editor
Bundle Signature:com.jetbrains.intellij
Config Path:~/Library/Application Support/JetBrains/IntelliJIdea2024.3/options/ai.xml
MCP Support:Plugin stdio
Google Gemini / AntigravityGOVERNED
Desktop Application
Bundle Signature:com.google.antigravity
Config Path:~/.gemini/antigravity-ide/mcp/
MCP Support:Eager & Lazy stdio

Undeclared Tool Alerting & Risk Tiering

When an AI client spawns a process or opens a socket connection to a tool server not listed in approved enterprise policy, Gaussian classifies the event into a risk tier:

  • CRITICAL: Undeclared stdio tool with file write + network egress permissions.
  • HIGH: Unreviewed skill package executing local python scripts.
  • MEDIUM: Newly discovered MCP server running in monitor mode.

Frequently Asked Questions (FAQ)

What is Shadow AI Asset Discovery?

Shadow AI Discovery is the continuous automated identification of AI client applications (Cursor, Claude Desktop, Windsurf, Zed), MCP tool server manifests, and unapproved local AI runners across enterprise workstations.

How does Gaussian discover undeclared MCP servers?

Gaussian combines configuration file parsing (mcp.json, settings.json) with OS-level Endpoint Security (ES) process tracking to catch stdio tool spawns and HTTP socket connections in real time.

Running AI agents on Mac at scale? We'll tune policy with you.

Design partners →